<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">

  <url>
    <loc>https://www.gemxit.au/agent_foskett/agent-foskett-academy</loc>
    <lastmod>2026-05-24</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.80</priority>
  </url>

  <url>
    <loc>https://www.gemxit.au/agent_foskett/what-is-kql</loc>
    <lastmod>2026-05-24</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.80</priority>
  </url>

  <url>
    <loc>https://www.gemxit.au/agent_foskett/your-first-kql-query</loc>
    <lastmod>2026-05-25</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.80</priority>
  </url>

  <url>
    <loc>https://www.gemxit.au/agent_foskett/understanding-microsoft-security-tables</loc>
    <lastmod>2026-05-25</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.80</priority>
  </url>

  <url>
    <loc>https://www.gemxit.au/agent_foskett/filtering-kql-results</loc>
    <lastmod>2026-05-26</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.80</priority>
  </url>

  <url>
    <loc>https://www.gemxit.au/agent_foskett/choosing-useful-columns</loc>
    <lastmod>2026-05-26</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.80</priority>
  </url>

  <url>
    <loc>https://www.gemxit.au/agent_foskett/sorting-and-understanding-results</loc>
    <lastmod>2026-05-26</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.80</priority>
  </url>

  <url>
    <loc>https://www.gemxit.au/agent_foskett/counting-grouping-summarize</loc>
    <lastmod>2026-05-27</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.80</priority>
  </url>

  <url>
    <loc>https://www.gemxit.au/agent_foskett/finding-time-patterns-bin</loc>
    <lastmod>2026-05-27</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.80</priority>
  </url>

  <url>
    <loc>https://www.gemxit.au/agent_foskett/finding-unique-values-distinct</loc>
    <lastmod>2026-05-28</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.80</priority>
  </url>

  <url>
    <loc>https://www.gemxit.au/agent_foskett/using-top-high-volume-activity</loc>
    <lastmod>2026-05-28</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.80</priority>
  </url>

  <url>
    <loc>https://www.gemxit.au/agent_foskett/combining-kql-operators-investigations</loc>
    <lastmod>2026-05-29</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.80</priority>
  </url>

  <url>
    <loc>https://www.gemxit.au/agent_foskett/investigating-emailevents-microsoft-defender-xdr</loc>
    <lastmod>2026-05-29</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.80</priority>
  </url>

  <url>
    <loc>https://www.gemxit.au/agent_foskett/investigating-urlclickevents-microsoft-defender-xdr</loc>
    <lastmod>2026-06-03</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.80</priority>
  </url>

  <url>
    <loc>https://www.gemxit.au/agent_foskett/connecting-tables-with-join</loc>
    <lastmod>2026-06-02</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.80</priority>
  </url>

  <url>
    <loc>https://www.gemxit.au/agent_foskett/building-investigation-timelines-kql</loc>
    <lastmod>2026-06-02</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.80</priority>
  </url>

  <url>
    <loc>https://www.gemxit.au/agent_foskett/using-let-statements-to-reuse-evidence</loc>
    <lastmod>2026-06-03</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.80</priority>
  </url>

  <url>
    <loc>https://www.gemxit.au/agent_foskett/creating-investigation-parameters-kql</loc>
    <lastmod>2026-06-03</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.80</priority>
  </url>

  <url>
    <loc>https://www.gemxit.au/agent_foskett/using-in-search-multiple-indicators</loc>
    <lastmod>2026-06-03</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.80</priority>
  </url>

</urlset>